Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: Di1ZH/7HFodVMGxDfuPDHRywLx2WhwjV9TUY1pAWpYI=
Subject key identifier: 20:CB:EC:4B:A5:B9:2A:C8:DB:6F:B0:15:77:2D:5D:22:50:9F:1A:48
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019CAE35D1D6B2E8085A9AEA2A21D9178CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0B6A
Signing time: Mon 02 Mar 2026 11:01:28 +0000
Manifest this update: Mon 02 Mar 2026 11:01:28 +0000
Manifest next update: Tue 03 Mar 2026 11:01:28 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: VovYsaN+odO0H3CqMmSOumjGt3lz9dnNsJWq61ktBq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:d1:d6:b2:e8:08:5a:9a:ea:2a:21:d9:17:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Mar 2 11:01:28 2026 GMT
Not After : Mar 3 11:01:28 2026 GMT
Subject: CN=20cbec4ba5b92ac8db6fb015772d5d22509f1a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:4b:30:86:04:36:ea:a7:a6:a3:b5:69:76:
e6:64:cb:f2:1d:f1:1b:9d:7a:e0:a3:65:33:c5:a5:
91:4b:18:76:27:bf:df:20:c8:7a:79:15:d5:0b:70:
46:e9:cd:66:4e:36:a3:aa:25:25:55:5d:4a:da:24:
05:ed:cc:25:f1:d2:21:3b:39:38:d7:35:e7:5b:cb:
ad:38:c4:66:d0:a6:9f:b3:c6:af:f6:7b:0f:d1:80:
a6:cf:17:37:9a:3c:4a:94:08:4e:c9:88:c1:3b:66:
8c:b5:a8:e4:4e:21:b5:cd:ed:20:ec:02:b0:d4:46:
18:e3:5d:66:60:bc:f1:fd:c6:c9:91:17:68:27:ec:
63:6f:a9:75:93:5d:6d:57:3b:e3:02:66:02:9e:dc:
29:00:83:82:f8:38:16:d2:aa:33:49:82:e0:26:aa:
29:bf:7b:e9:e1:5e:32:a7:2b:08:66:99:18:c4:d0:
5e:6b:95:c8:be:65:88:77:1f:30:08:a9:6e:d3:02:
a2:9f:d2:f4:1d:81:ac:a5:ef:18:86:b9:4b:e0:84:
0d:f8:66:2a:b0:e4:f0:c0:3b:19:27:97:00:53:c7:
9c:4f:c2:49:d9:b7:bd:c0:86:ad:d1:8a:7a:5e:a9:
41:d2:9f:af:67:86:51:45:23:5a:57:35:47:85:b1:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:EC:4B:A5:B9:2A:C8:DB:6F:B0:15:77:2D:5D:22:50:9F:1A:48
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:1a:98:f6:fd:ca:51:bf:eb:5c:b5:bd:2d:dd:b2:1c:44:
c4:4e:4e:1a:3a:07:a1:ea:88:63:ec:a0:76:86:2c:88:04:5c:
10:8d:1d:b0:46:1f:d6:a3:66:e5:61:92:4c:19:10:fc:63:fb:
64:70:83:2c:33:da:8d:91:1b:50:b6:e6:4b:b6:43:c1:fb:c4:
2f:0c:b4:5f:7b:56:29:d8:e2:d4:f7:8d:45:b9:9a:57:78:c9:
ae:b2:c6:ec:f2:ee:bf:2c:ce:aa:0a:cc:b9:c5:5d:2d:6c:ed:
2b:28:47:ab:0d:3a:2d:5f:7e:68:e6:de:70:de:95:86:94:09:
92:f7:be:ed:9c:ea:70:35:3b:47:a4:0a:13:61:94:44:a1:06:
00:0e:b3:bf:35:9d:ac:b6:32:4f:86:4d:ab:06:ab:0e:8c:c7:
e5:18:ea:14:d5:07:b4:38:e5:5a:a5:bb:87:24:a5:f5:80:c3:
ee:3f:44:02:fe:36:e3:74:5b:4b:17:c5:42:1f:bd:19:73:07:
92:77:fd:6f:9a:89:0d:17:40:78:a7:c7:22:c4:fc:2e:70:fe:
2d:b6:36:b1:7a:00:84:ff:84:a2:cd:bd:c2:0e:bd:2d:21:ee:
00:37:74:d3:4a:4b:3d:fa:90:a8:dc:91:39:87:e0:f6:ef:6a:
8e:b0:75:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNdHWsugIWprqKiHZF4zsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjYwMzAyMTEwMTI4WhcNMjYwMzAzMTEwMTI4WjAzMTEwLwYDVQQD
EygyMGNiZWM0YmE1YjkyYWM4ZGI2ZmIwMTU3NzJkNWQyMjUwOWYxYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB5LMIYENuqnpqO1aXbmZMvyHfEb
nXrgo2UzxaWRSxh2J7/fIMh6eRXVC3BG6c1mTjajqiUlVV1K2iQF7cwl8dIhOzk4
1zXnW8utOMRm0Kafs8av9nsP0YCmzxc3mjxKlAhOyYjBO2aMtajkTiG1ze0g7AKw
1EYY411mYLzx/cbJkRdoJ+xjb6l1k11tVzvjAmYCntwpAIOC+DgW0qozSYLgJqop
v3vp4V4ypysIZpkYxNBea5XIvmWIdx8wCKlu0wKin9L0HYGspe8YhrlL4IQN+GYq
sOTwwDsZJ5cAU8ecT8JJ2be9wIat0Yp6XqlB0p+vZ4ZRRSNaVzVHhbHdoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDL7EuluSrI22+wFXctXSJQnxpIMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd8amPb9
ylG/61y1vS3dshxExE5OGjoHoeqIY+ygdoYsiARcEI0dsEYf1qNm5WGSTBkQ/GP7
ZHCDLDPajZEbULbmS7ZDwfvELwy0X3tWKdji1PeNRbmaV3jJrrLG7PLuvyzOqgrM
ucVdLWztKyhHqw06LV9+aObecN6VhpQJkve+7ZzqcDU7R6QKE2GURKEGAA6zvzWd
rLYyT4ZNqwarDozH5RjqFNUHtDjlWqW7hySl9YDD7j9EAv4243RbSxfFQh+9GXMH
knf9b5qJDRdAeKfHIsT8LnD+LbY2sXoAhP+Eos29wg69LSHuADd000pLPfqQqNyR
OYfg9u9qjrB1kw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:01 2026 by rpki-client